Qantas has experienced a cyber incident affecting up to 6 million customer data records within one of its contact centres after a cyber criminal gained access to a third-party customer servicing platform.

The airline is currently investigating the extent of the data breach, and said it's expected to be significant. The data potentially accessed includes names, email addresses, phone numbers, birth dates, and frequent flyer numbers across 6 million customers. However, credit card details, personal financial information, and passport details were not compromised, Qantas stated. Additionally, no frequent flyer accounts, passwords, PIN numbers, or login details were accessed.

In an ASX statement, Qantas said it first detected unusual activity on a third-party platform used by a Qantas airline contact centre on Monday, then took immediate steps and contained the system. It has confirmed all Qantas systems remain secure. The Australian Cyber Security Centre, the Office of the Australian Information Commissioner, and the Australian Federal Police have been notified of the incident and the airline is working with the agencies as investigation into the cyber incident continues.

Qantas Group CEO Vanessa Hudson issued an apology to customers, recognising the uncertainty this will cause.

"Our customers trust us with their personal information and we take that responsibility seriously." Hudson said. "We are contacting our customers today and our focus is on providing them with the necessary support."

The airline has set up a dedicated customer support line and a webpage to provide information and support to affected customers. Customers with upcoming travel plans are advised that there is no action required on their part.

Qantas also emphasised its commitment to data security in light of this incident and said it is taking steps to ensure the protection of customer information.